usr.bin/ssh/session.c

74 #include "auth-options.h"
121 extern ServerOptions options;
251 	if (!options.expose_userauth_info || info == NULL)
287 	if ((options.allow_tcp_forwarding & FORWARD_LOCAL) != 0) {
302 	if ((options.allow_tcp_forwarding & FORWARD_REMOTE) != 0) {
331 	    options.disable_forwarding) {
335 		if ((options.allow_tcp_forwarding & FORWARD_LOCAL) == 0)
339 		if ((options.allow_tcp_forwarding & FORWARD_REMOTE) == 0)
501 	    options.ip_qos_interactive, options.ip_qos_bulk);
617 	    options.ip_qos_interactive, options.ip_qos_bulk);
633 	if (options.adm_forced_command) {
635 		command = options.adm_forced_command;
678 	if (options.gss_authentication) {
740 	if (options.print_motd) {
878 	/* Set custom environment options from pubkey authentication. */
879 	if (options.permit_user_env) {
886 				if (options.permit_user_env_allowlist == NULL ||
888 				    options.permit_user_env_allowlist, 0) == 1)
897 	if (options.permit_user_env) {
901 		    options.permit_user_env_allowlist);
905 	for (i = 0; i < options.num_setenv; i++) {
906 		cp = xstrdup(options.setenv[i]);
909 			fatal("Invalid config SetEnv: %s", options.setenv[i]);
965 	if (!s->is_subsystem && options.adm_forced_command == NULL &&
966 	    auth_opts->permit_user_rc && options.permit_user_rc &&
995 	} else if (do_xauth && options.xauth_location != NULL) {
1000 			    options.xauth_location, s->auth_display);
1003 			    options.xauth_location, s->auth_display,
1006 		if (xasprintf(&cmd, "%s -q -", options.xauth_location) == -1)
1120 		if (!in_chroot && options.chroot_directory != NULL &&
1121 		    strcasecmp(options.chroot_directory, "none") != 0) {
1122 			tmp = tilde_expand_filename(options.chroot_directory,
1132 			free(options.chroot_directory);
1133 			options.chroot_directory = NULL;
1142 	} else if (options.chroot_directory != NULL &&
1143 	    strcasecmp(options.chroot_directory, "none") != 0) {
1284 	if (options.kerberos_get_afs_token && k_hasafs() &&
1395 	if (id >= options.max_sessions ||
1398 		    id, options.max_sessions, sessions_nalloc);
1418 		if (sessions_nalloc >= options.max_sessions)
1421 		    sessions_nalloc, options.max_sessions);
1436 		    sessions_first_unused, options.max_sessions,
1577 	if (!auth_opts->permit_pty_flag || !options.permit_tty) {
1636 	for (i = 0; i < options.num_subsystems; i++) {
1637 		if (strcmp(s->subsys, options.subsystem_name[i]) == 0) {
1638 			prog = options.subsystem_command[i];
1639 			cmd = options.subsystem_args[i];
1651 			    options.subsystem_name[i]);
1765 	for (i = 0; i < options.num_accept_env; i++) {
1766 		if (match_pattern(name, options.accept_env[i])) {
1861 	    !options.allow_agent_forwarding) {
2241 		ssh_packet_send_debug(ssh, "X11 forwarding disabled by key options.");
2244 	if (!options.x11_forwarding) {
2248 	if (options.xauth_location == NULL ||
2249 	    (stat(options.xauth_location, &st) == -1)) {
2257 	if (x11_create_display_inet(ssh, options.x11_display_offset,
2258 	    options.x11_use_localhost, s->single_connection,
2276 	if (options.x11_use_localhost) {
2318 	if (options.kerberos_ticket_cleanup &&
2324 	if (options.gss_cleanup_creds)